chore: use trusted publishing

Author: Minishlink

.github/actions/setup/action.yml

@@ -1,19 +1,27 @@
 name: Setup
 description: Setup Node.js and install dependencies
 
+inputs:
+  skip-cache:
+    description: Skip dependency caching
+    required: false
+    default: "false"
+
 runs:
   using: composite
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version-file: .node-version
+        registry-url: "https://registry.npmjs.org"
 
     - run: corepack enable
       shell: bash
 
     - name: Restore dependencies
       id: yarn-cache
+      if: inputs.skip-cache != 'true'
       uses: actions/cache/restore@v4
       with:
         path: |
@@ -25,7 +33,7 @@ runs:
           ${{ runner.os }}-yarn-
 
     - name: Install dependencies
-      if: steps.yarn-cache.outputs.cache-hit != 'true'
+      if: inputs.skip-cache == 'true' || steps.yarn-cache.outputs.cache-hit != 'true'
       run: yarn install --immutable
       shell: bash
 
@@ -34,7 +42,7 @@ runs:
       shell: bash
 
     - name: Cache dependencies
-      if: steps.yarn-cache.outputs.cache-hit != 'true'
+      if: inputs.skip-cache != 'true' && steps.yarn-cache.outputs.cache-hit != 'true'
       uses: actions/cache/save@v4
       with:
         path: |

.github/workflows/onRelease.yml

@@ -4,15 +4,21 @@ on:
   release:
     types: [published]
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup
         uses: ./.github/actions/setup
+        with:
+          skip-cache: "true"
 
       - name: Set npm tag
         id: set-npm-tag
@@ -24,7 +30,5 @@ jobs:
             echo "NPM_TAG=latest" >> $GITHUB_OUTPUT
           fi
 
-      - uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c
-        with:
-          token: "${{ secrets.NPM_TOKEN }}"
-          tag: ${{ steps.set-npm-tag.outputs.NPM_TAG }}
+      - name: Publish
+        run: npm publish --tag ${{ steps.set-npm-tag.outputs.NPM_TAG }}

.node-version

@@ -1 +1 @@
-22
+24

package.json

@@ -48,7 +48,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/appzung/react-native-code-push.git"
+    "url": "git+https://github.com/AppZung/react-native-code-push.git"
   },
   "dependencies": {
     "hoist-non-react-statics": "^3.3.2"